| | CVE-2026-31519 |  Red Hat | medium | 7.0 | — | | A flaw was found in the Linux kernel's Btrfs filesystem. A race condition, a situation where the out… | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-31467 | Red Hat | medium | 5.5 | — | | No description is available for this CVE. | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-31432 | Red Hat | medium | — | 0.0%
| | A flaw was found in the ksmbd component of the Linux kernel. This vulnerability allows an attacker t… | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-31433 | Red Hat | medium | — | 0.0%
| | A flaw was found in the ksmbd module of the Linux kernel. A remote attacker can exploit this vulnera… | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-22746 | Red Hat | low | 3.7 | 0.1%
| | A flaw was found in Spring Security. If an application uses the UserDetails#isEnabled, #isAccountNon… | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-22748 | Red Hat | medium | 5.3 | 0.1%
| | A flaw was found in Spring Security. When an application is configured to decode JSON Web Tokens (JW… | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-22753 | Red Hat | medium | 6.5 | 0.1%
| | A flaw was found in Spring Security. When an application uses specific configurations involving `sec… | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-22747 |  VMware | medium | 6.8 | 0.3%
| | Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle cer… | Apr 22, 2026 | Jul 15, 2026 |
| | CVE-2026-22754 | VMware | high | 7.5 | 0.3%
| | Vulnerability in Spring Spring Security. If an application uses <sec:intercept-url servlet-path="/se… | Apr 22, 2026 | Jul 15, 2026 |
| | CVE-2026-40542 |  Apache | high | 7.3 | 0.6%
| | Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the cli… | Apr 22, 2026 | Sep 9, 2026 |
| | CVE-2026-31431 | VMware | high | 7.8 | 96.3%
| ⚠ KEV | In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to … | Apr 22, 2026 | Jul 15, 2026 |
| | CVE-2026-6857 | Apache | high | 7.5 | 0.7%
| | A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the Prot… | Apr 22, 2026 | Sep 9, 2026 |
| | CVE-2026-41651 | Red Hat | high | 8.8 | — | | A flaw was found in PackageKit. A time-of-check time-of-use (TOCTOU) race condition on transaction f… | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-41326 | Red Hat | high | 8.8 | 0.1%
| | Kata Containers is an open source project focusing on a standard implementation of lightweight Virtu… | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-6019 | Red Hat | medium | 6.8 | 0.0%
| | http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript… | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-41168 | Red Hat | medium | 6.5 | 0.1%
| | A flaw was found in pypdf. An attacker can craft a malicious PDF file containing oversized cross-ref… | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-41312 | Red Hat | medium | 5.5 | 0.0%
| | A flaw was found in pypdf. An attacker can craft a malicious PDF file containing a specially compres… | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-41313 | Red Hat | medium | 5.5 | 0.0%
| | A flaw was found in pypdf. An attacker can craft a malicious PDF file with a large trailer `/Size` v… | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-41314 | Red Hat | medium | 5.5 | 0.0%
| | A flaw was found in pypdf, a pure-Python PDF library. An attacker can exploit this vulnerability by … | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-41134 |  Microsoft | high | 7.8 | 0.4%
| | Kiota is an OpenAPI based HTTP Client code generator. Versions prior to 1.29.1 and 1.31.1 are affect… | Apr 22, 2026 | Aug 17, 2026 |
| | CVE-2026-41176 | Red Hat | high | 9.8 | 16.7%
| | Rclone is a command-line program to sync files and directories to and from different cloud storage p… | Apr 22, 2026 | Apr 22, 2026 |
| | CVE-2026-31533 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
net/tls: fix use-after-free in -… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-31531 | Red Hat | medium | 5.5 | 0.0%
| | A flaw was found in the Linux kernel. A local user can trigger a denial of service by querying a nex… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-31532 | Red Hat | high | 7.0 | 0.0%
| | A flaw was found in the Linux kernel's Controller Area Network (CAN) raw socket implementation. A us… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-41179 | Red Hat | high | 9.8 | 0.1%
| | A flaw was found in Rclone, a command-line program for syncing files with cloud storage. An unauthen… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-41196 | Red Hat | high | 8.2 | 0.1%
| | A flaw was found in Luanti (formerly Minetest), an open-source game platform. A malicious mod, when … | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-41988 | Red Hat | low | 2.8 | 0.0%
| | A flaw was found in uuid. When external output buffers are used with UUID versions 3, 5, or 6, an at… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-41989 | Red Hat | medium | 7.5 | 0.0%
| ✓ Fix | A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-41990 | Red Hat | low | 3.3 | 0.0%
| ✓ Fix | A flaw was found in Libgcrypt. During Dilithium signing operations, the library fails to perform a b… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2025-13763 | Red Hat | low | 5.7 | — | | Multiple uses of uninitialized variables were found in libopensc that may lead to information disclo… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2025-66286 | Red Hat | medium | 4.7 | — | | An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform … | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-33999 | Red Hat | high | 7.8 | — | | A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XK… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-34001 | Red Hat | high | 7.8 | — | | A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence … | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-34003 | Red Hat | high | 7.8 | — | | A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could se… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-41238 | Red Hat | medium | 6.8 | 0.0%
| | A flaw was found in DOMPurify, a software library used to clean potentially malicious code from web … | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-41239 | Red Hat | medium | 6.8 | 0.1%
| | A flaw was found in DOMPurify. A remote attacker could exploit this cross-site scripting (XSS) vulne… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-41240 | Red Hat | medium | 8.1 | 0.0%
| ✓ Fix | A flaw was found in DOMPurify, a DOM-only cross-site scripting sanitizer. A remote attacker could ex… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-6919 | Red Hat | high | 8.8 | 0.1%
| | Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who ha… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-6920 | Red Hat | high | 9.0 | 0.1%
| | Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attac… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-6921 | Red Hat | high | 9.6 | 0.0%
| | Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potenti… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-40886 | Red Hat | high | 7.7 | 0.1%
| | A flaw was found in Argo Workflows, an open-source system for managing tasks in Kubernetes. An attac… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-41246 | Red Hat | high | 8.1 | 0.1%
| | Contour is a Kubernetes ingress controller using Envoy proxy. From v1.19.0 to before v1.33.4, v1.32.… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-41205 | Red Hat | medium | 5.9 | 0.1%
| | Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vuln… | Apr 23, 2026 | Apr 23, 2026 |
| | CVE-2026-33694 |  Tenable | high | 7.8 | 0.2%
| | This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files… | Apr 23, 2026 | Aug 21, 2026 |
| | CVE-2026-24303 | Microsoft | critical | 9.6 | 0.0%
| | Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privile… | Apr 23, 2026 | Apr 28, 2026 |
| | CVE-2026-26150 | Microsoft | high | 8.6 | 0.1%
| | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate p… | Apr 23, 2026 | Apr 29, 2026 |
| | CVE-2026-32172 | Microsoft | high | 8.0 | 0.0%
| | Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute … | Apr 23, 2026 | Apr 29, 2026 |
| | CVE-2026-32210 | Microsoft | critical | 9.3 | 0.0%
| | Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacke… | Apr 23, 2026 | May 5, 2026 |
| | CVE-2026-33102 | Microsoft | critical | 9.3 | 0.0%
| | Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker … | Apr 23, 2026 | Apr 29, 2026 |
| | CVE-2026-33819 | Microsoft | critical | 10.0 | 0.4%
| | Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code … | Apr 23, 2026 | May 5, 2026 |